$ rpki-client -vvf rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa File: 3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa (raw, json) Hash identifier: ikUXpc34e4DmsIJzMJM3Qb8I/+cnOqhHLXKzsPXN57I= Subject key identifier: DB:44:7B:6E:12:7B:11:03:42:F0:98:E6:30:E6:65:C9:68:4D:ED:46 Certificate issuer: /CN=AF66100C07C72416053F944B967509CE9CB5BD57 Certificate serial: 7C3199F60B3651E583DE7818AEA4A5A1D7899B1B Authority key identifier: AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa Signing time: Sun 03 May 2026 02:16:55 +0000 ROA not before: Sun 03 May 2026 02:11:55 +0000 ROA not after: Sun 02 May 2027 02:16:55 +0000 asID: 141674 IP address blocks: 103.171.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:14:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:31:99:f6:0b:36:51:e5:83:de:78:18:ae:a4:a5:a1:d7:89:9b:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF66100C07C72416053F944B967509CE9CB5BD57 Validity Not Before: May 3 02:11:55 2026 GMT Not After : May 2 02:16:55 2027 GMT Subject: CN=DB447B6E127B110342F098E630E665C9684DED46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e1:72:13:b0:73:b2:1c:ed:02:c1:c0:45:1c: 70:21:82:f7:a2:c8:f4:c3:fd:6e:33:78:81:4a:01: 6d:aa:de:9b:60:d9:8c:16:8e:36:df:ee:9f:f2:64: d9:ec:8a:c6:a9:08:a5:04:71:2f:3f:1a:25:e7:1d: 60:53:b6:48:33:68:f6:c3:a7:6f:e0:9c:b3:48:93: d9:62:0e:b6:98:fd:89:92:89:f9:66:c4:61:de:65: 8c:94:18:a0:a6:43:14:c4:1e:d1:e6:e1:b8:76:7a: d5:38:f2:d0:01:ee:ac:18:99:94:ed:7d:7e:40:b1: 17:2a:63:fb:80:67:42:f1:b5:4a:7f:d1:a7:a6:29: e5:a7:03:c3:c2:62:f5:31:48:cf:a0:0c:8b:c3:e9: 40:de:13:1c:a8:f6:03:2e:37:1a:c0:74:4c:ba:19: 22:24:ba:4a:63:cb:72:9e:14:3b:2e:18:3e:13:88: 9d:6e:0e:a8:2b:aa:e7:5f:3e:b9:59:6d:80:10:8e: 06:a3:02:f4:57:15:b4:0c:c3:52:17:6b:a6:c7:25: a9:49:9e:ee:e3:15:8b:3d:94:14:94:f4:07:9b:39: e5:46:37:9a:a8:48:bf:94:98:3a:11:09:d3:25:25: 1e:10:fd:d0:2b:29:58:14:8b:74:1d:a9:3a:19:2c: 50:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:44:7B:6E:12:7B:11:03:42:F0:98:E6:30:E6:65:C9:68:4D:ED:46 X509v3 Authority Key Identifier: keyid:AF:66:10:0C:07:C7:24:16:05:3F:94:4B:96:75:09:CE:9C:B5:BD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/AF66100C07C72416053F944B967509CE9CB5BD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/AF66100C07C72416053F944B967509CE9CB5BD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234352e302f32342d3234203d3e20313431363734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.171.245.0/24 Signature Algorithm: sha256WithRSAEncryption 61:1e:95:8c:37:7f:7c:d5:b8:a6:d6:c4:3b:e8:de:2b:5a:b4: cd:f1:46:d0:a5:f4:0c:83:d7:b2:10:cf:cd:2b:45:d9:f0:a8: 5a:68:c4:a1:70:46:78:75:c6:fc:eb:dc:b9:c8:57:c8:b9:8a: 0a:5c:98:1a:40:fb:66:17:a4:d9:03:60:d7:b3:16:14:70:b7: 55:59:97:e1:b4:a1:6b:41:fa:d9:fa:13:08:e1:f2:69:c6:7c: 58:f0:fa:a4:f6:d4:02:d5:9a:96:d0:ae:f9:7c:58:48:e1:46: b3:4b:df:83:07:2d:ab:1d:44:c1:59:85:fb:e1:6d:9e:8b:03: f1:cd:72:f7:70:43:3e:36:b9:a6:fe:1d:49:d3:a1:7c:69:26: ca:f4:72:44:7e:1c:8a:4f:a1:60:3c:a8:6b:25:72:4c:98:16: 76:9a:d0:3e:18:72:23:39:3a:06:72:91:6a:b2:64:b5:fc:eb: d5:dd:43:bb:7c:99:db:49:05:8a:3b:f1:9f:36:e8:47:60:05: 34:b9:43:cf:1f:f8:9d:d9:bf:34:ca:2c:4c:7b:67:b2:ea:31: f1:71:b5:90:ed:63:4b:52:52:24:e7:a5:15:80:3c:c0:2c:c6: f1:55:82:20:34:dd:6e:ee:a1:d3:c4:c2:cd:38:92:ee:3c:a5: 27:86:49:9d -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUfDGZ9gs2UeWD3ngYrqSlodeJmxswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY2NjEwMEMwN0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5 Q0I1QkQ1NzAeFw0yNjA1MDMwMjExNTVaFw0yNzA1MDIwMjE2NTVaMDMxMTAvBgNV BAMTKERCNDQ3QjZFMTI3QjExMDM0MkYwOThFNjMwRTY2NUM5Njg0REVENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4XITsHOyHO0CwcBFHHAhgvei yPTD/W4zeIFKAW2q3ptg2YwWjjbf7p/yZNnsisapCKUEcS8/GiXnHWBTtkgzaPbD p2/gnLNIk9liDraY/YmSiflmxGHeZYyUGKCmQxTEHtHm4bh2etU48tAB7qwYmZTt fX5AsRcqY/uAZ0LxtUp/0aemKeWnA8PCYvUxSM+gDIvD6UDeExyo9gMuNxrAdEy6 GSIkukpjy3KeFDsuGD4TiJ1uDqgrqudfPrlZbYAQjgajAvRXFbQMw1IXa6bHJalJ nu7jFYs9lBSU9AebOeVGN5qoSL+UmDoRCdMlJR4Q/dArKVgUi3QdqToZLFBjAgMB AAGjggI2MIICMjAdBgNVHQ4EFgQU20R7bhJ7EQNC8JjmMOZlyWhN7UYwHwYDVR0j BBgwFoAUr2YQDAfHJBYFP5RLlnUJzpy1vVcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWFhYzFiYjktNDVmNi00NjY3LWIxOTQtOWE2OWE0YTRkNzU1LzAvQUY2NjEwMEMw N0M3MjQxNjA1M0Y5NDRCOTY3NTA5Q0U5Q0I1QkQ1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9BRjY2MTAwQzA3QzcyNDE2MDUzRjk0NEI5Njc1MDlDRTlDQjVC RDU3LmNlcjCBpwYIKwYBBQUHAQsEgZowgZcwgZQGCCsGAQUFBzALhoGHcnN5bmM6 Ly9ycGtpLXJzeW5jLmlkbmljLm5ldC9yZXBvLzFhYWMxYmI5LTQ1ZjYtNDY2Ny1i MTk0LTlhNjlhNGE0ZDc1NS8wLzMxMzAzMzJlMzEzNzMxMmUzMjM0MzUyZTMwMmYz MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM3MzQucm9hMBgGA1UdIAEB/wQOMAww CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnq/UwDQYJ KoZIhvcNAQELBQADggEBAGEelYw3f3zVuKbWxDvo3itatM3xRtCl9AyD17IQz80r RdnwqFpoxKFwRnh1xvzr3LnIV8i5igpcmBpA+2YXpNkDYNezFhRwt1VZl+G0oWtB +tn6Ewjh8mnGfFjw+qT21ALVmpbQrvl8WEjhRrNL34MHLasdRMFZhfvhbZ6LA/HN cvdwQz42uab+HUnToXxpJsr0ckR+HIpPoWA8qGslckyYFnaa0D4YciM5OgZykWqy ZLX869XdQ7t8mdtJBYo78Z826EdgBTS5Q88f+J3ZvzTKLEx7Z7LqMfFxtZDtY0tS UiTnpRWAPMAsxvFVgiA03W7uodPEws04ku48pSeGSZ0= -----END CERTIFICATE-----Generated at Wed May 13 11:46:53 2026 by rpki-client